- Public - talk.mikrotik.com.au

LtAP Mini Kit
by Dave Browning 02 Aug '18

02 Aug '18

Hi All, Looking for anyone with an LtAP mini kit who can check if they have the same problem as I. If I power from USB port, the lte interface doesn't come up when WiFi is enabled - If I power from PoE or AC, works fine. Cheers, Dave Browning | Network Engineer P 1300 791 678 Level 1, 12 Railway Tce, Milton QLD 4064

3 3

CGN Nat 444 on CCR1072
by Matt Perkins 02 Aug '18

02 Aug '18

Hi All, I have been tasked with implementing NAT444 on a 1072 does anybody have any idea what the expected throughput would be with 65025 NAT rules. Matt. -- /* Matt Perkins Direct 1300 137 379 Spectrum Networks Ptd. Ltd. Office 1300 133 299 matt(a)spectrum.com.au Level 6, 350 George Street Sydney 2000 Spectrum Networks is a member of the Communications Alliance & TIO */

3 3

Re: [MT-AU Public] SIP Identification issue in mangle and queues
by Nick Pratley | Servers Australia 25 Jul '18

25 Jul '18

Hey Paul, How are you talking to MyNetPhone? Do you have dedicated cross connects to them, or are you just talking over the internet? If it's over the internet, its the general consensus is that DSCP gets remarked to 0 through all providers - so it'd only be used within your network toward the upstream and down to your customer. Probably also why you won't see any markings from MyNetPhone inbound on your transit links. If you're just trying to QOS your last mile circuits so large downloads etc don't break SIP - can you move that to customer access device? Not sure what phones you are using but Polycom/Cisco/Yealink can all mark their RTP / Signal traffic with different markings. You could match these markings from your customer on your LNS and add those addresses to an address list with a ~15 minute timeout. You could then match that address list on your inbound interfaces from the internet and remark internally before routing to your customer site over last mile access. Obviously that'd mark everything for those IPs down to the customer and not just RTP - however if the provider only uses them for RTP, I don't really see the issue. Regards, Nick (p.s. Sorry for signature in advanced - it's enforced outbound on our MTA, just subbed personal email to this list so next reply won't have it - I promise) --- original message --- On Wed, Jul 25, 2018 at 04:53 pm, <paul(a)buildingconnect.com.au> Paul Julian wrote: Well I found the problem I think, I am still working out how to get around it though. It seems that mynetfone use different servers for their signalling and RTP, which means if you use the sip service type in Mikrotik, or port 5060/5061 to mark your packets then you will miss the RTP traffic which is really what you need to get. Somehow I need to mark packets that are related to the SIP connection, not just the SIP connection itself. I will have to have a think about this one..... Regards Paul -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of Philip Loenneker Sent: Wednesday, 25 July 2018 2:41 PM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] SIP Identification issue in mangle and queues Fair call :) Are your mangle rules not matching, or only the queue not matching? -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Paul Julian Sent: Wednesday, 25 July 2018 2:18 PM To: 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] SIP Identification issue in mangle and queues Hi Philip, Quite honestly we wouldn't trust any provider with DSCP values, they just don't get it, we mark everything based on connection type and/or ports and also pickup SIP servers dynamically based on those other criteria. The problem comes when we mark the packets they seem to get marked but the way we see them treated in queues is strange, they seem to have a bursty nature rather than having a consistent 80kbit/s sort of situation. There is something strange going on but it is only affecting this one customer who uses mynetfone, so I am trying to think outside the box and wondering what on earth could be happening to cause this. Regards Paul -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of Philip Loenneker Sent: Wednesday, 25 July 2018 2:14 PM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] SIP Identification issue in mangle and queues Hi Paul, We have noticed that MyNetFone do NOT mark their packets with DSCP values, even if the handsets/softphones at the customer end do. You can see this clearly in torch and packet captures. We have asked them about it in the past, and didn't manage to get them to understand what DSCP was and why it was important. You may have more luck if you reach out to them, as it's been a while since we tried. If you do have some luck, please let me know so I can check our customers again :) Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au www.tasmanet.com.au -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Paul Julian Sent: Wednesday, 25 July 2018 1:33 PM To: 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> Subject: [MT-AU Public] SIP Identification issue in mangle and queues Hi All, Just wondering if anybody has seen this anomaly before. We use Mikrotik routers as LNS’s in many locations, we prioritise VOIP traffic outbound to our customers and it works very well. We do this using a mix of mangle rules and reconstruct the customer facing queues during login, this also works very well and allows us to prioritise any voice provider not just ourselves. Just recently we had a customer advise that they were having voice issues and were wondering if they needed to increase their capacity, upon looking at their usage history we could see that they were spiking a bit but also noticed that their VOIP queue was not matching any packets. Other customers were matching just fine with the same rules in place, however we totally went through everything and couldn’t find any issues. As a precaution we upgraded the ROS to the latest bugfix version and also upgraded firmware. After that the other customers VOIP queues were still matching just fine so we thought perhaps Mynetfone were doing something a bit weird with the voice traffic to this customer, so we even setup a dedicated queue for this customer with everything needed to match the traffic, but still nothing. It’s a really weird problem, it’s only this one customer, all other customers are working correctly, so I’m not sure whether it’s a mynetfone problem or maybe the customers router, but we only prioritise the outbound traffic TO the customer and across our network but in this case it’s the traffic from mynetfone to the customer which isn’t matching, as such I wouldn’t think that their CPE could impact what we are doing in any way. Any thoughts would be appreciated, I am fast running out of my remaining hair on this one ૘ෞ਀ ഀ਀吀栀愀渀欀猀ഀ਀倀愀甀氀 _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au --- end of original message ---

2 1

SIP Identification issue in mangle and queues
by Paul Julian 25 Jul '18

25 Jul '18

Hi All, Just wondering if anybody has seen this anomaly before. We use Mikrotik routers as LNS’s in many locations, we prioritise VOIP traffic outbound to our customers and it works very well. We do this using a mix of mangle rules and reconstruct the customer facing queues during login, this also works very well and allows us to prioritise any voice provider not just ourselves. Just recently we had a customer advise that they were having voice issues and were wondering if they needed to increase their capacity, upon looking at their usage history we could see that they were spiking a bit but also noticed that their VOIP queue was not matching any packets. Other customers were matching just fine with the same rules in place, however we totally went through everything and couldn’t find any issues. As a precaution we upgraded the ROS to the latest bugfix version and also upgraded firmware. After that the other customers VOIP queues were still matching just fine so we thought perhaps Mynetfone were doing something a bit weird with the voice traffic to this customer, so we even setup a dedicated queue for this customer with everything needed to match the traffic, but still nothing. It’s a really weird problem, it’s only this one customer, all other customers are working correctly, so I’m not sure whether it’s a mynetfone problem or maybe the customers router, but we only prioritise the outbound traffic TO the customer and across our network but in this case it’s the traffic from mynetfone to the customer which isn’t matching, as such I wouldn’t think that their CPE could impact what we are doing in any way. Any thoughts would be appreciated, I am fast running out of my remaining hair on this one ૘ෞ਀ ഀ਀吀栀愀渀欀猀ഀ਀倀愀甀氀

2 5

Forward Chain firewall rules
by Paul Julian 20 Jul '18

20 Jul '18

Hi All, Just wondering what others do when it comes to jumping to new chains from the forward chain for protecting services running behind your Mikrotik running as a firewall. We typically jump to a new chain for stuff like SMTP servers or Web servers and then filter based on protocol and port within that new chain to protect boxes, then drop anything that doesn't match. Some people add an accept rule at the top of each of those chains for related and established connections, some people add one at the beginning of the default forward chain, what are peoples thoughts on the pros and cons of doing this in any way mentioned ?, are there any risks doing one way or another or should you just stick to allowing only the trusted ports and protocols through in each relevant chain rather than anything that's already been allowed previously ? I'm interested in peoples thoughts on this Thanks Paul

2 1

ccr1072 power supply
by Alex Samad 20 Jul '18

20 Jul '18

Hi Is there any way from the command line to detect the health of the power supplies ? I looked at /system health but couldn't find anything related to health of each power supply A

2 2

Mikrotik 60Ghz Gear
by Paul Julian 20 Jul '18

20 Jul '18

Hi, according to Duxtel some 60Ghz kit has already flown out the door, who is using it and what's it like ? I am looking for some real world experience on the new LHG 60 Ghz gear. What is it like in the real world ? What distance are you comfortably seeing from it ? What about colocation on the same mast ? Thanks Paul

2 2

Maxxwave Rack Mount Adapter
by Russell Hurren 18 Jul '18

18 Jul '18

Does anyone know where I could get a rackmount adapter for a hex-s like this one or similar? https://www.balticnetworks.com/mikrotik-rackmount-adapter-for-routerboard-2… Shipping from the US is several times more expensive than the adapter itself. Wouldn't mind buying 2-3 so I've got some spares on hand, but I only need one at the moment. Regards Russell Hurren

3 2

Mikrotik My Account login issues
by Philip Loenneker 03 Jul '18

03 Jul '18

Hi all, I know this is probably more suited to the Mikrotik forums or support email, but was hoping someone on here might be able to confirm if it's an issue. I seem to be unable to log in to https://mikrotik.com/client/ When I try, it goes to https://mikrotik.com/client/login which has the "recover login name and password" section added to the bottom. I need to get in to check on some CHR licenses. Can someone else please confirm if they can or can't get into the My Account section of the Mikrotik site? Cheers. Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

2 4

Mini PCIe 3G/4G
by Dave Browning 26 Jun '18

26 Jun '18

Hi All, What 3G/4G cards are people having the best luck with in RouterOS devices? Our go to DUXCEL isn’t a thing anymore as Sierra discontinued the MC7304 I’m told. Dave Browning | Network Engineer P 1300 791 678 Level 1, 12 Railway Tce, Milton QLD 4064

1 0